Hi, I'm new to JAMF and wondered if any of this talent pool could point me in the right direction with fixing my problem. I would my user to be able to download Office 365 apps from Self-Service. As of right now, the apps show up in self-service but only redirect the user to the app store, and they can't download apps with their Managed Apple ID's. Is there a way to bypass the store and have it automatically install the apps when they click install?

Based on a JAMF webinar I want to create a self serv item that would format the drive on a Mac and install Catalina. I have created a policy that deploys Install macOS Catalina.app to /Applicationsand a second policy that executes the command '/Applications/Install macOS Catalina.app/Contents/Resources/startosinstall' --eraseinstall --agreetolicense --forcequitapps --newvolumename 'Macintosh HD' --nointeraction & In theory, this should quite all open apps, restart the computer, wipe the drive and install macOS Catalina. All it does is create a new partition and dump the installer files in there. That's it! The Catalina package runs fine when I install it manually.What am I doing wrong here?

Has anyone tried enrolling a new Mac with Catalina (10.15.0) and it just hangs on "Retrieving Activation Record "?

I need to push out a VPN payload that has its DNS servers set manually (Advanced/DNS under VPN settings in System Preferences) Is there a way to set the DNS servers for a VPN via script or terminal command?

Hello, Im an intern and I have been tasked with trying to figure out how to get JSS to pull the Department field from AD and then they want me to create a Smart Group with the search criteria of Departments. I have looked all over JSS but I can't seem to figure out how to get AD to pull that information. In the system settings for the LDAP AD server Departments has the correct attribute but then when I search a user JSS is still not pulling the information from AD.

Hello everyone, Does anyone know how to accurately report on whether or not a parent has linked their app to a student device in Jamf Pro?I can see in advanced searches there is an option for parent link with a free text box, but not sure what this is expecting.On a test device I have, it showed three when a parent had linked and zero when they hadn't - but is it really that simple?!?!Or is that the number of parent apps linked to that one device?

Hi , I want to test a application in jamf using parameters.I am completely new to Jamf and scripting. sudo /Users/p/Downloads/ABCD Installer 8.app/Contents/MacOS/ABC Installer --quiet --update No --analytics No The above code works in terminal. How do I test same in Jamf ?How do I get to know the application path in Jamf ?and what should be the script ?is it going to be 1 line scirpt ?

I have looked at this a few times now and not gotten a clear answer. I need to have all the desktop systems in my site turning off airport so that we remove excess chatter on the network. I Have this currently working through Managed Prefs but would like to switch it to Configuration Profiles. I downloaded com.apple.MCXAirPort.manifest from Jamf Nation but not sure where to go from there. Ideas and directions on how to do this? I know I don't remember how to convert plsit to upload into custom either. Been a while since I have looked into this and any help with how to go about this would be appreciated. I don't really want to create a script would rather it be a profile I can force to the machine.

Trying to move away from QuickAdd.pkg, have LDAP working, user logs in and chooses their site, but they're still just getting a button to download a QuickAdd.pkg. That pkg installs, but the profile will not be installed in 11.0 and there's not even one in there to approve like there was in Catalina. Are there elements of this process I am missing? I expect it to download and install the Jamf certificate and the mobile profile, but that option never arises.

Hello, I'm working on a script which will allow you to copy files/folders to an end user's Mac. I've noticed that scripts which error out are flagged in red in the logs for the policy. What determines if a script errored out and is there anyway to force that? In this script I run a check to see if the destination path exists. If it does not, the script terminates with a non-zero exit code. When such an event occurs I'd like it highlighted as a Problem so that I can see which machines did not successfully copy a file. After testing it a few times on a machine where I knew the destination path did not exist, the logs were marked as successful even though the exit code was non-zero.

I've updated this Python script to work on Big Sur, using all of the python3 modules instead. Admittedly, I'm not a Python expert by any means, so this could be an issue with the code. The new, python3 version of the script can be found: here. In any case, I'm receiving the error Script result: macOS 11 or later required ! with exit code 134 upon executing the script on my machine via a policy invoked in Self Service. My environment: Python ver 3.9.1 Xcode command line tools installed macOS Big Sur 11.1 I couldn't find much about this online or on Jamf Nation. Has anyone run into this error before?

Does anyone know what the direct URL for the M1 version of Google Chrome is? I'm using the script that will always download the latest version so I'm trying to update it. Right now it's DownloadURL="https://dl.google.com/chrome/mac/stable/GGRO/googlechrome.dmg"Thanks!

UPDATE 2020-02-04: Microsoft has postponed the update again from March 2020 to the second half of 2020. UPDATE 2020-01-24: Microsoft has postponed the update from January 2020 to March 2020. For y'all who are binding your devices to Active Directory, you are going to have to make sure that the LDAP connections are encrypted from mid-January 2020. Microsoft will release security updates across the board that requires all connections to be encrypted. There are essentially only two things that need to be looked at: the Jamf Pro server LDAP bind options and, if you bind any of your clients, the client directory bind configuration. For the Jamf Pro LDAP binding options, there is a great guide to follow here. The client directory bind configuration, however, can be applied in different ways, but the most usual ways are by configuration profile or binding via CLI. At the moment, the payload called Directory in the configuration profiles has an option under Packet encryption called "ssl"

Been running in circles for a while with this. I can SSH successfully into an enrolled computer using our jamf management account: "ssh jamfadmin@ipadress" However if I try to use the local Administrator account "ssh Administrator@ipadress" I get the error "Connection closed by 10.200.0.103 port 22" after entering the password. I know for a fact I am entering the correct password because if I ssh in successfully with "ssh jamfadmin@ipadress" and then enter "su Administrator" and enter that same Administrator password, the account switches to Administrator as designed. What the heck am I missing here?

Hello, I noticed a couple weeks ago, that all devices have the "Managed Software Center" installed. It checks for updates when I open it and then errors out. The about says "https://www.munki.org/munki/ Managed Software Center". I can't even click on the other tabs within the software, like "Software, Categories, My items" However, I don't ever recall installing such an app, neither do we use Munki. Why is this on all Macs installed? How do I remove it from all Macs? Or do I actually need it or does Jamf need it? Thanks

Hello, I have a few Ipad that I have in my Business manager. Like, their serial numbers are appearing in my inventory, and they are assigned to my jamf MDM. Though they don't seem to be enrolled in the apple business manager at all.When reset they start up like any consumer ipad. You need to set up everything, and in the end nothing appears in the settings menu saying that the device is managed and no MDM profile is present. I'm unable to re-enrolle the devices into "DEP" with configurator since these are already in my DEP inventory. Though if I only chose to supervise the device. It does work and the MDM gets uploaded fine. Still the ipads themselves doesnt seems to be any linked to the business manager. Any clue on this ?

Hello to the community,first, I wish you all a good and healthy new year 2021 :-)Here is my question:We had to restore our virtual jamf server from a backup, because the update to jamf 10.26.1 failed. After the failed update the server was no longer reachable. (Before the update, I saved the server.xml and the web.xml, but the restore of the two files did not help).Now, a "configuration password" is needed to do the update to jamf 10.26.1.All passwords, I know do not work.Is there anyone, who can give me a hint, how to be able to solve this issue ?

I need to setup extension attribute to monitor for bad display dongles.Using fitHeadless4k display dongles. system_profiler SPDisplaysDataType shows both good and bad macs reporting the same "Display". However, the color profile on the bad macs is sRGB IEC61966-2.1 and the good macs is fitHeadless4k.

I am working on moving my users from Mojave to Catalina, i have pre-seeded the installer on all my machines. I am using the jamf script from https://github.com/kc9wwh/macOSUpgrade. I have used this script with no issues for awhile. But i now have a strange issue, the script kicks off everything looks good then on restart a install of some sort starts takes about 45 minutes. But after its done the machine comes back up with Mojave and not Catalina. No issues are seen in the JAMF Pro policy logs. I have no idea what is going on.

I am trying to make an extension attribute to report which network segment a device is in for reporting to a "search inventory" report. Since you cannot really report on JAMFs network segments in settings in any meaningful way I am trying an extension attribute. Thankfully I only have 3 segments of interest for this specific situation. We have a number of Mac Mini’s in our datacenter for contractors to remote access. I am trying to provide something easy for support to look at in an inventory report that tells them which computer belongs to which segment when they go to assign a device. I’m wanting it to tell them which vendors subnet the device is in (ie result1) as our support could not remember IP ranges if their live depended on it. The following is what I was able to come up with however all devices come back with the "Does not fall in to 3 results" result regardless of their IP address. I have not tried to make an EA this complex before and have not really

We ran into an issue at the beginning of the year where our school's student newspaper did not have access to the basic fonts that were previously installed in /Library/Fonts by Office 2011 in the latest version of Adobe CC InDesign. As a result, we ended up extracting several of these fonts from Word (/Applications/Microsoft Word.app/Contents/Resources/DFonts) and deploying them to the necessary machines through a configuration profile. I understand that Microsoft has made the decision to make everything their respective office apps need within the app itself, but I'm wondering if anyone has figured out a way through an alias or other method to get the OS and third-party apps to see the fonts in Microsoft Word so that these Office fonts are usable by other applications on the Mac. I tried running a ln -s /Applications/Microsoft Word.app/Contents/Resources/DFonts /Library/Fonts to create a symbolic link in /Library/Fonts, but opening up the Font Book app as well as the fon

Having a problem and I wonder if others are having similar issues. In our early testing, we imaged 10.13 with an erase and install, and then enrolled in our JAMF Pro server. The initial account created on the computers we deleted, because they were dummy accounts, and our JAMF server created all necessary accounts by policy for the last almost decade. Fast forward a bit, and we get past initial OS testing and realize that we don't have an account which has secureToken enabled. And we can't turn on secureToken without an enabled account. So we're in a catch-22. Do I pretty much have zero choice but to delete these workstations and start over? It's only affecting a small population, but no one wants to go through the process of an E&I... I have a ticket open with Apple on this, but they've been less than helpful with suggestions. Anyone else having this issue, or figured out a work around? DEP doesn't help, since some think that is Apple's answer to everything lately.

Is there anyone more familiar than I with Jamf's API who knows if I could script an alert (Slack or e-mail) for anytime a new computer enrolls?

Hi All, We're in the process of trying to "fix" all our machines that have either computer shipped MAS apps, or user installed versions. But we're having a hard time thinking of a good way to scope them. Scoping them to all computers results in any machine that already has the app just not installing the VPP version. Scoping to computers that DON'T have the app results in the computer falling out of scope after it has the app... which presents potential future issues (if Jamf ever implements "remove app when no longer in scope" for macOS, the computer would sit there and add/remove the app repeatedly). The "best" way I can think of is using the API to add computers to a static group that scopes the app... but this is super messy and last time I tried this the static group ended up clobbering itself (I believe jamf fixed this bug where adding/removing any members of a static group would cause the group to be recreated from scratch). So, how are people doing this in a rational way?

Hi, Found a variant of Minecraft that puts an invisible folder at the root of the local AD users home folder. It creates a folder called ".minecraft". I am not very good at scripts, and I don't want to accidentally screw things up. I know you can do a path to a file in a policy, but am not sure how to do that for every local AD user account. So just asking for peoples best practice to do away with this file. Thanks!